Infosecurity News

  1. Former CISA and NCSC Heads Warn Against Glamorizing Threat Actor Names

    Jen Easterly and Ciaran Martin called for a universal, vendor-neutral cyber threat actor naming system

  2. European Journalists Targeted by Paragon Spyware, Citizen Lab Confirms

    This is the first forensic evidence that journalists’ devices have been infected with Paragon’s Graphite spyware

  3. Ransomware Gang Exploits SimpleHelp RMM to Compromise Utility Billing Firm

    A CISA advisory urged all software vendors and downstream customers to check if they are impacted by unpatched versions of the SimpleHelp RMM tool

  4. Microsoft 365 Copilot: New Zero-Click AI Vulnerability Allows Corporate Data Theft

    Researchers have found a flaw in Microsoft 365 Copilot that allows the exfiltration of sensitive corporate data with a simple email

  5. Palo Alto Networks Patches Series of Vulnerabilities

    The cybersecurity provider also implemented recent fixes in Chromium that affected its Prisma Access Browser

  6. NIST Publishes New Zero Trust Implementation Guidance

    The new NIST guidance sets out 19 example implementations of zero trust using commercial, off-the-shelf technologies

  7. Europol Says Criminal Demand for Data is “Skyrocketing”

    Europol warns of “vicious circle” of data breaches and cybercrime

  8. Phishing Alert as Erie Insurance Reveals Cyber “Event”

    Erie Insurance reveals suspected network breach and ongoing outage

  9. Congress Introduces Bill to Strengthen Healthcare Cybersecurity

    The legislation aims to expand the federal government’s role in helping healthcare providers protect and respond to cyber-attacks

  10. 20,000 Asian IPs and Domains Dismantled in Infostealer Crackdown

    Interpol-coordinated Operation Secure led to 32 arrests, including the suspected ringleader of a cybercriminal organization

  11. Hands-On Skills Now Key to Landing Your First Cyber Role

    An ISC2 study found that 90% of security hiring managers would consider entry-level candidates with only previous IT work experience

  12. Researcher Finds Five Zero-Days and 20+ Misconfigurations in Salesforce Cloud

    The products affected by the issues are part of the Salesforce OmniStudio suite, including FlexCards and Data Mappers

  13. Half of Mobile Users Now Face Daily Scams

    Malwarebytes claims 44% of mobile users are exposed to scams every day

  14. Two Microsoft Zero-Days for Admins to Fix in June Patch Tuesday

    Microsoft has patched two zero days this month, one of which is being exploited in the wild

  15. Android Enterprise Rolls Out Security and Productivity Updates

    Android Enterprise has introduced features for mobile security, device management and user productivity in its latest update

  16. Mastery Schools Notifies 37,031 of Major Data Breach

    A ransomware attack on Mastery Schools, Philadelphia, has compromised personal information of 37,031 individuals, exposing sensitive data

  17. DDoS Attacks on Financial Sector Surge in Scale and Sophistication

    The financial sector was the industry most targeted by distributed denial-of-service (DDoS) attacks in 2024, with a peak in October

  18. SentinelOne Warns Cybersecurity Vendors of Chinese Attacks

    SentinelOne revealed details of two new intrusion attempts by China-nexus actors

  19. Wholesale Food Giant UNFI Admits Security Breach

    UNFI says it is investigating unauthorized network activity, and that some operations are affected

  20. PayU Plugin Flaw Allows Account Takeover on 5000 WordPress Sites

    Vulnerability in PayU CommercePro plugin allows account hijacking on thousands of WordPress sites

What’s hot on Infosecurity Magazine?